f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629

General

Target
f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629
Size 1.2MB
Sample241109-124w3stcpb
SHA256 f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629
MD5 965d6a0a1ad174bc68ea8fadcf30bc29
SHA1 cdcd15e74d8cfa7ecbc25b2c7462485d48152a28
SHA512 8805d45be22e4600257c9b8e044edd0b1b16c754196d1704eb44c39c07564e82dd0da06106f93a3e16dfc3d38b7d7708bedba3881d1d3e039f832d0df3b06a7a
SSDEEP 24576:GtRGhsPWEqfsDGbKmncgXF1z3hA0yPM5gLle1kwI:ERG4qUqumci1z3hA0yy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629

File Explorer

f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629

.exe 1.2MB

f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629

IMPHASH 642f639d014c52fc4358f30dfb7c046f
SHA256 f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629
MD5 965d6a0a1ad174bc68ea8fadcf30bc29
SHA1 cdcd15e74d8cfa7ecbc25b2c7462485d48152a28
SHA512 8805d45be22e4600257c9b8e044edd0b1b16c754196d1704eb44c39c07564e82dd0da06106f93a3e16dfc3d38b7d7708bedba3881d1d3e039f832d0df3b06a7a
SSDEEP 24576:GtRGhsPWEqfsDGbKmncgXF1z3hA0yPM5gLle1kwI:ERG4qUqumci1z3hA0yy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bekusezunuf-te.pdb

kernel32

GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA TzSpecificLocalTimeToSystemTime EnumResourceTypesA TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnfix GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA FindResourceExW GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize lstrlenA GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

f632d83b3bbf460b1ee90b5642352ad6aaeab7bb702d2eba9f7776c77411b629

kernel32

user32

gdi32

generic